Vulnerabilities

TI-2025-31434 CVE-2025-49386 · GHSA-m36c-hhr2-59cc

WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability

MEDIUM 40

Deserialization of Untrusted Data vulnerability in Scott Reilly Preserve Code Formatting preserve-code-formatting allows Object Injection.This issue affects Preserve Code Formatting: from n/a through <= 4.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00462 Published 2025-11-06 No fix listed CWE-502

TI-2025-17645 CVE-2025-23878 · GHSA-w6mg-vrx4-r5j4

WordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Post-to-Post Links easy-post-to-post-links allows Stored XSS.This issue affects Post-to-Post Links: from…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2025-01-16 No fix listed CWE-79

TI-2024-18047 CVE-2024-27192 · GHSA-3v79-p2r2-6744

WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Configure SMTP allows Reflected XSS.This issue affects Configure SMTP: from n/a through 3.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-03-15 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability

WordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability

WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)